(Senior) Incident Responder
DataExpert
Veenendaal
This role sits at the heart of cyber incident response, with the successful candidate leading and coordinating the handling of complex security incidents from initial triage through to recovery. Day to day, this involves conducting in-depth analysis to determine the nature, scope and root cause of incidents, directing containment and eradication activities, and supporting clients on-site during crisis situations. The position requires close collaboration with SOC analysts, threat intelligence specialists and forensic experts, as well as translating technical findings into clear guidance for stakeholders. Evidence preservation and structured reporting are central responsibilities. Relevant certifications such as SANS GCFA, GCFE or GNFA are valued, alongside a strong grounding in DFIR methodologies and incident response processes. This role suits an experienced, composed professional who combines technical depth with leadership, client focus and a genuine drive to strengthen organisational resilience between and beyond incidents.
Typical advertised salary for Incident Response roles in Netherlands: €66,000–€91,000 (median €78,000 — from 16 recent listings analysed by Forensic Focus).
Compare Incident Response salaries in Netherlands →
Certifications mentioned: GCFA · GCFE · GNFA · SANS — find training for these on the DFIR Training Finder.





